frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

BuildKit: Docker's Hidden Gem That Can Build Almost Anything

https://tuananh.net/2026/02/25/buildkit-docker-hidden-gem/
45•jasonpeacock•3h ago

Comments

whalesalad•2h ago
Folks, please fix your AI generated ascii artwork that is way out of alignment. This is becoming so prevalent - instant AI tell.
craftkiller•1h ago
Are you on a phone? I loaded the article with both my phone and laptop. The ascii diagram was thoroughly distorted on my phone but it looked fine on my laptop.
whalesalad•1h ago
Firefox on a 27" display. Could be the font being used to render.
antonvs•19m ago
The only ASCII image I see on that page is actually a PNG:

https://tuananh.net/img/buildkit-llb.png

Maybe the page was changed? If you're just talking about the gaps between lines, that's just the line height in whatever source was used to render the image, which doesn't say much about AI either way.

tuananh•16m ago
looks fine to me but since it messed up for some so i replace it with png
unshavedyak•1h ago
I imagine it's not the AI then, but the site font/css/something. Seeing as it looks fine for me (Brave, Linux).
seneca•47m ago
I found it more jarring that they chose to use both Excalidraw and ascii art. What a strange choice.
tuananh•18m ago
the hugo theme requires an image thumbnail. i just find one and use it :D
scuff3d•10m ago
The "This is the key insight -" or "x is where it gets practical -", are dead give aways too. If I wanted an LLMs explanation of how it works, I can ask an LLM. When I see articles like this I'm expecting an actual human expert
moochmooch•1h ago
unfortunately, make is more well written software. I think ultimately Dockerfile was a failed iteration of Makefile. YAML & Dockerfile are poor interfaces for these types of applications.

The code first options are quite good these days, but you can get so far with make & other legacy tooling. Docker feels like a company looking to sell enterprise software first and foremost, not move the industry standard forward

great article tho!

craftkiller•1h ago
Along similar lines, when I was reading the article I was thinking "this just sounds like a slightly worse version of nix". Nix has the whole content addressed build DAG with caching, the intermediate language, and the ability to produce arbitrary outputs, but it is functional (100% of the inputs must be accounted for in the hashes/lockfile, as opposed to Docker where you can run commands like `apk add firefox` which is pulling data from outside sources that can change from day to day, so two docker builds can end up with the same hash but different output, making it _not_ reproducible like the article falsely claims).
jasonpeacock•1h ago
You can network-jail your builds to prevent pulling from external repos and force the build environment to define/capture its inputs.
ricardobeat•1h ago
> so two docker builds can end up with the same hash but different output

The cache key includes the state of the filesystem so I don’t think that would ever be true.

Regardless, the purpose of the tool is to generate [layer] images to be reused, exactly to avoid the pitfalls of reproducible builds, isn’t it? In the context of the article, what makes builds reproducible is the shared cache.

xyzzy_plugh•26m ago
It's not reproducible then, it's simply cached. It's a valid approach but there's tradeoffs of course.
kccqzy•1h ago
Make is timestamp based. That is a thoroughly out-of-date approach only suitable for a single computer. You want distributed hash-based caching in the modern world.
bmitch3020•1h ago
I don't use buildkit for artifacts, but I do like to output images to an OCI Layout so that I can finish some local checks and updates before pushing the image to a registry.

But the real hidden power of buildkit is the ability to swap out the Dockerfile parser. If you want to see that in action, look at this Dockerfile (yes, that's yaml) used for one of their hardened images: https://github.com/docker-hardened-images/catalog/blob/main/...

tuananh•1h ago
i did include a repo example on how to create custom frontend as well https://github.com/tuananh/apkbuild
verdverm•46m ago
BuildKit also comes with a lot of pain. Dagger (a set of great interfaces to BuildKit in many languages) is working to remove it. Even their BuildKit maintainers think it's a good idea.

BuildKit is very cool tech, but painful to run at volume

Fun gotchya in BuildKit direct versus Dockerfiles, is the map iteration you loaded those ENV vars into consistent? No, that's why your cache keeps getting busted. You can't do this in the linear Dockerfile

Show HN: EK-1 – A local-first, sovereign AI agent built in Go and Rust

https://egokernel.com
1•felixche•18s ago•0 comments

Pacific Fusion finds a cheaper way to make its fusion reactor work

https://techcrunch.com/2026/02/05/pacific-fusion-finds-a-cheaper-way-to-make-its-fusion-reactor-w...
2•PaulHoule•2m ago•0 comments

Hanging with news-free friends preserves my sanity in a chaotic world

https://theishything.bearblog.dev/i-have-been-hanging-out-with-people-who-dont-watch-the-news/
1•speckx•2m ago•0 comments

NutriAI

https://nutriai.si/
1•domaisi•2m ago•1 comments

Claude Code Mexico breach: training safety failed ground truth layer

https://github.com/Mysticbirdie/hallucination-elimination-benchmark
1•MysticBirdie•3m ago•2 comments

Ask HN: Solo Founder Questions

1•newbeeguy•3m ago•0 comments

The Wrong Apocalypse [pdf]

https://ionanalytics.com/wp-content/uploads/2026/02/The_Wrong_Apocalypse.pdf
1•simonebrunozzi•4m ago•0 comments

New research: Nighttime road traffic noise stresses the heart and blood vessels

https://www.escardio.org/news/press/press-releases/new-research/
1•josephcs•4m ago•0 comments

Show HN: I built an open-source analytics platform for Claude Code sessions

https://github.com/ConfabulousDev/confab-web
1•jjak82•7m ago•0 comments

People living in UK's poorest areas have less diverse gut bacteria, study finds

https://www.theguardian.com/society/2026/feb/24/people-living-in-uks-poorest-areas-have-less-dive...
2•beardyw•8m ago•0 comments

Housing: Rent vs. Buy Calculator Spreadsheet

https://longviewy.com/rent-vs-buy-spreadsheet-using-five-key-inputs/
1•josephcs•8m ago•0 comments

I built a 151k-node GraphRAG swarm that autonomously invents SDG solutions

1•wisdomagi•8m ago•0 comments

Regex is dead. We replaced it

https://matchlang.com
2•hollowsolve•11m ago•4 comments

OpenaAI: Disrupting malicious uses of our models [pdf]

https://cdn.openai.com/pdf/df438d70-e3fe-4a6c-a403-ff632def8f79/disrupting-malicious-uses-of-ai.pdf
1•defly•12m ago•0 comments

The age of flat pack code

https://ilearnt.com/blog/flatpackcode/
1•speckx•12m ago•0 comments

Ralph Wiggum Explained: Stop Telling AI What You Want – Tell It What Blocks You

https://platform.uno/blog/ralph-wiggum-explained-stop-telling-ai-what-you-want-tell-it-what-block...
1•e12e•12m ago•0 comments

Show HN: Relay – SMS API for developers (send your first text in 2 min)

1•danielkdewar•13m ago•0 comments

Adonisjs v7 released (Next.js alternative)

https://adonisjs.com/blog/v7
1•danfritz•13m ago•0 comments

You Just Need Postgres

https://youjustneedpostgres.com/
2•olucasandrade•13m ago•1 comments

Show HN: A minimal Claude Code clone written in Rust

https://github.com/keon/mini-claude-code
1•kwk236•16m ago•0 comments

Typing Fun Game

https://kwerty.site
1•soexya•16m ago•0 comments

Smartphones, Online Music Streaming, and Traffic Fatalities

https://www.nber.org/papers/w34866
1•speckx•16m ago•0 comments

Secria Mobile – Post-quantum encrypted email, now on iOS and Android

https://secria.me
1•adrianmav•17m ago•1 comments

Show HN: 20x – Open-source agent orchestrator for Linear/HubSpot tasks

https://github.com/peakflo/20x
2•dmitryv•18m ago•0 comments

Nobody Trusts Anybody Anymore

https://yourbrainonmoney.substack.com/p/low-trust-society-cost
1•lemonberry•19m ago•0 comments

Tell HN: YouTube Subscription page is being deprecated

2•csours•20m ago•1 comments

Any Open Source Contributors?

https://github.com/Shantanugupta43/SuggestPilot
1•shaanuknow•22m ago•1 comments

Show HN: Ask a graph database questions in plain English (runs in the browser)

https://cogdb.io/playground
1•am3141•23m ago•0 comments

Half of the side projects from HN make less than $1000 a month (2024-2025)

https://indielaunches.com/indie-maker-analytics-2024-2025-projects/
1•s-stude•23m ago•2 comments

Palo Alto's $400M scanner labels 91% of confirmed OpenClaw threats safe

https://oathe.ai/engineering/we-audited-1620-ai-agent-skills/
5•riyadaftary•24m ago•2 comments